CVE-2025-58593

CVE-2025-58593 : Stored XSS in Orbit Fox by ThemeIsle (WordPress plugin) due to improper input neutralization during web page generation. Affected: Orbit Fox versions up to and including 3.0.0. Remediation: update Orbit Fox to a version later than 3.0.0. Details are corroborated by Patchstack/PT-...

WordPress plugin Orbit Fox by ThemeIsle 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

PT-2025-35728

Name of the Vulnerable Software and Affected Versions: Orbit Fox versions through 3.0.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update Orbit Fox to a version later...

Silver Fox APT Exploits Signed Windows Driver to Deliver ValleyRAT

Check Point reports Silver Fox APT using a signed WatchDog driver flaw to disable Windows security and deliver…...

CVE-2025-55420

A Reflected Cross Site Scripting XSS vulnerability was found in /index.php in FoxCMS v1.2.6. When a crafted script is sent via a GET request, it is reflected unsanitized into the HTML response. This permits execution of arbitrary JavaScript code when a logged-in user submits the malicious input...

Malicious code in fox-dove-zdr554-project (npm)

The package fox-dove-zdr554-project was found to contain malicious code...

fox (0.0.8), lowkick (>=0.0.1, <=0.1.0) +2 more potentially affected by unknown CVE via combiner (1.2.1)

combiner NPM version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on combiner and may be impacted: - fox 0.0.8 - lowkick =0.0.1, =1.1.0, =0.3.1, =0.3.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17379...

Malicious code in fox-nugget-spj176-project (npm)

The package fox-nugget-spj176-project was found to contain malicious code...

Malicious code in prairie-fox-oai169-project (npm)

The package prairie-fox-oai169-project was found to contain malicious code...

Malicious code in yonder-fox-kwk428-project (npm)

The package yonder-fox-kwk428-project was found to contain malicious code...

Malicious code in fox-tundra-vjc448-project (npm)

The package fox-tundra-vjc448-project was found to contain malicious code...

Malicious code in kelp-fox-bkt354-project (npm)

The package kelp-fox-bkt354-project was found to contain malicious code...

Malicious code in fox-thunder-hlv017-project (npm)

The package fox-thunder-hlv017-project was found to contain malicious code...

Malicious code in fox-arctic-qmu744-project (npm)

The package fox-arctic-qmu744-project was found to contain malicious code...

Malicious code in fox-undertow-wmc930-project (npm)

The package fox-undertow-wmc930-project was found to contain malicious code...

Malicious code in fox-zebra-lqc707-project (npm)

The package fox-zebra-lqc707-project was found to contain malicious code...

Malicious code in giraffe-fox-qok168-project (npm)

The package giraffe-fox-qok168-project was found to contain malicious code...

Malicious code in fox-eagle-qrz110-project (npm)

The package fox-eagle-qrz110-project was found to contain malicious code...

brick (0.0.0), fox (>=0.0.9, <=1.6.2) +2 more potentially affected by unknown CVE via core-modules (0.0.0)

core-modules NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on core-modules and may be impacted: - brick 0.0.0 - fox =0.0.9, =3.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17577...

fox (>=1.5.0, <=1.6.2), pomodoro-timer (>=0.0.4, <=0.0.5) +3 more potentially affected by unknown CVE via after-time (>=0.0.0, <=0.0.1)

after-time NPM version =0.0.0, =1.5.0, =0.0.4, =0.0.0, =0.0.0, =0.0.1 - tomato-timer 0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14147...